Allenph9 Posted March 9, 2012 Share Posted March 9, 2012 So I am completely done with my forum after several posts here and a lot of time. But crap! I just realized that the way my avatar system works it will give away the password! I REALLY don't want to redo that system because truth is it is about 40 percent of the entire sites coding. It works by making pictures in a directory named the usersname.thepassword . Whatever filesystem. Now when I echo the path everyone can see the password and username in the source code! And thy can click it to see the picture! Is there a way to hide the paths or the source codeM thanks! Quote Link to comment Share on other sites More sharing options...
Monkuar Posted March 9, 2012 Share Posted March 9, 2012 Theres no way in hell I think you can hide source code, maybe a js encrpytion but i really dont think u can bro Quote Link to comment Share on other sites More sharing options...
marcus Posted March 9, 2012 Share Posted March 9, 2012 Why would you store a person's password in the directory name? That is just plain stupid. You could literally just store it under the username, why would you allow multiple users to have the same username? Quote Link to comment Share on other sites More sharing options...
Allenph9 Posted March 9, 2012 Author Share Posted March 9, 2012 Its my first time round the block y'all. I obviously realize that now. What's this about a java script encryption? Quote Link to comment Share on other sites More sharing options...
Maq Posted March 9, 2012 Share Posted March 9, 2012 Allenph9, please do not double post. Quote Link to comment Share on other sites More sharing options...
requinix Posted March 9, 2012 Share Posted March 9, 2012 Like I said in the other thread :-\ it's possible to hide the location of the image but you still need to redo the system. Quote Link to comment Share on other sites More sharing options...
Allenph9 Posted March 9, 2012 Author Share Posted March 9, 2012 Sorry for the double post. I'm on mobile at the moment maybe it submitted twiceM req if I can hide the source code why do I need to do the system? mind telling me how this can be done? Quote Link to comment Share on other sites More sharing options...
requinix Posted March 9, 2012 Share Posted March 9, 2012 I didn't say you can hide the source code. That's not possible. But you can hide the actual location of the image. I'm not going to tell you how because: Â What you have now is bad. It needs to change because it is bad. Doing anything other than fixing it is also bad. The fact that it may take a lot of work doesn't matter - it needs to change. Quote Link to comment Share on other sites More sharing options...
batwimp Posted March 9, 2012 Share Posted March 9, 2012 I agree with requinix, bad, bad, bad. At this point, it would be better to take the whole site down and not have anything than to have username and password stored as the image name. You need to re-write the portion of your code that uses this. Even if you could hide the source code (which you can't), it's still very bad programming practice. Chalk it up as a lesson learned, get it fixed, and move on. Quote Link to comment Share on other sites More sharing options...
spiderwell Posted March 9, 2012 Share Posted March 9, 2012 wow you might as well change the path to their credit card number while you are at it! Quote Link to comment Share on other sites More sharing options...
Psycho Posted March 9, 2012 Share Posted March 9, 2012 For what it's worth, you shouldn't need/want to store their user images in different folders anyway. Simply put all the images in one folder and name the image according to the user id or the username. Quote Link to comment Share on other sites More sharing options...
Allenph9 Posted March 10, 2012 Author Share Posted March 10, 2012 So I ended up just redoing it. Took. While but it is done...added some new features along the way. Thanks for the insults everyone your a real ray of sunshine. Quote Link to comment Share on other sites More sharing options...
trq Posted March 10, 2012 Share Posted March 10, 2012 I don't see any insults in here. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.